Firebase Auth: How can an admin impersonate a user?

428 views
Skip to first unread message

Smitop

unread,
Dec 25, 2018, 3:13:09 AM12/25/18
to Firebase Google Group
How can I, as an admin, impersonate a Firebase Auth user, and generate a valid token for a user, without actually being able to authenticate as that user?

Kato Richardson

unread,
Dec 26, 2018, 2:14:04 PM12/26/18
to Firebase Google Group
Assuming that one has #access to a service account (i.e. a privileged backend service), then it's possible to sign a JWT token with that users UID, which would then be used to sign in on a client as that user.

☼, Kato

On Tue, Dec 25, 2018 at 1:13 AM Smitop <smit...@gmail.com> wrote:
How can I, as an admin, impersonate a Firebase Auth user, and generate a valid token for a user, without actually being able to authenticate as that user?

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/7c2eef2e-7fe3-4251-acf5-601577ccf8bf%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


--

Kato Richardson | Developer Programs Eng | kato...@google.com | 775-235-8398

Reply all
Reply to author
Forward
0 new messages